$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/f34e70eb-f511-378d-a8f9-037aebbc577a.roa File: f34e70eb-f511-378d-a8f9-037aebbc577a.roa (raw, json) Hash identifier: QUmS+KgfdzCs+yOx053QTxN5SnX3VkNCZ7QUQP/AuWI= Subject key identifier: C8:42:09:D7:E1:8E:58:92:B1:0C:D7:B0:9B:5B:B1:DD:8F:5C:4F:46 Certificate issuer: /CN=23f061ce-1a61-493b-8f3b-472334453f0d Certificate serial: 010D0C9F432858499DBF31C3EAD515EDFF419F40 Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/f34e70eb-f511-378d-a8f9-037aebbc577a.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 0 IP address blocks: 2620:10f:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:31:c3:ea:d5:15:ed:ff:41:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=6fdd52da-deda-41da-8020-df49520dedb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ad:c6:22:c4:56:58:8b:09:ad:0d:0d:32:05: 0c:e0:a5:ff:85:b6:91:4b:ba:38:17:9e:c0:d2:6c: a8:ca:bd:af:cf:37:3c:8e:8a:7a:ab:33:83:91:21: 14:a7:44:ac:ca:69:a5:0b:53:66:1a:65:33:1d:10: bb:c6:40:18:b7:20:f1:c7:f9:75:09:73:e2:35:89: fb:2f:6e:9b:7f:d6:a7:45:aa:d6:05:f6:8c:12:27: 4c:00:52:09:6f:04:f1:94:06:a3:80:fd:04:1e:a0: 0a:0b:56:f9:78:cc:9b:30:df:02:47:fe:41:5d:1e: 2e:3a:d7:3f:f1:3b:c2:83:11:38:57:02:9a:a9:58: e0:f8:5b:2f:9f:62:3c:96:9c:c3:2a:40:9f:33:69: 42:e7:17:a3:fd:d4:c3:79:44:ac:41:01:17:e2:ed: 4d:50:b6:b2:24:ad:e4:d6:fb:fd:04:63:a0:f1:3e: 49:4c:4b:ed:aa:13:73:83:b5:91:41:9e:27:d5:f4: 8c:73:d2:bd:57:4f:0c:ec:ec:80:eb:cd:61:50:b8: 45:e0:8a:05:5c:f2:49:ff:66:47:12:34:96:bb:9e: 07:db:16:e5:5d:39:09:5c:5e:b0:60:b6:c9:85:5f: 73:49:c7:f2:d3:f0:e5:36:a0:9f:9b:46:41:d2:da: 25:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:42:09:D7:E1:8E:58:92:B1:0C:D7:B0:9B:5B:B1:DD:8F:5C:4F:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/f34e70eb-f511-378d-a8f9-037aebbc577a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl X509v3 Authority Key Identifier: keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer sbgp-ipAddrBlock: critical IPv6: 2620:10f:b000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:54:74:e4:b3:79:4b:92:2a:a6:0a:39:35:2a:c9:62:ed:aa: a2:63:df:d2:5e:2c:c6:0b:74:90:38:4f:c9:a2:db:e6:af:88: 50:e7:0b:09:c1:76:88:2e:80:f9:bf:af:d9:ac:1b:34:7d:40: 4a:a2:e5:65:5f:94:25:97:84:ff:bf:5e:0d:93:e8:5a:2d:41: 2f:68:89:1f:60:d7:9c:ea:95:b9:d8:50:26:17:ae:1f:57:2e: 8e:66:c4:74:cb:c1:77:e4:0e:13:cb:2b:31:f3:dd:de:ef:6c: b0:14:71:d7:3c:c7:48:fc:56:23:a2:4e:d8:94:a5:68:55:f5: da:f0:51:f3:a0:f7:ea:81:bd:c0:d2:61:fc:2d:5b:02:d8:b0: 75:29:a7:b7:00:ce:fe:f2:b3:ae:83:39:bd:0f:a9:d2:6e:c5: 79:08:23:14:91:12:d0:61:a8:3f:6a:4f:cf:88:2a:bd:24:6c: ea:18:d1:9f:90:1f:6e:74:89:a3:23:25:21:f4:2c:1b:ab:c6: 53:76:59:b4:2e:ab:91:e0:32:6f:00:f1:1f:34:c9:98:6e:c8: f4:0b:84:17:04:a2:5f:e1:3b:5d:b4:6d:e7:93:c2:2a:6c:da: 1c:96:25:e1:88:93:62:d5:54:d2:68:ac:f9:0e:d9:fb:f3:de: f3:03:0f:83 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmdvzHD6tUV7f9Bn0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNmMDYxY2UtMWE2MS00OTNiLThmM2ItNDcyMzM0NDUz ZjBkMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk NmZkZDUyZGEtZGVkYS00MWRhLTgwMjAtZGY0OTUyMGRlZGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK3GIsRWWIsJrQ0NMgUM4KX/hbaRS7o4F57A 0myoyr2vzzc8jop6qzODkSEUp0SsymmlC1NmGmUzHRC7xkAYtyDxx/l1CXPiNYn7 L26bf9anRarWBfaMEidMAFIJbwTxlAajgP0EHqAKC1b5eMybMN8CR/5BXR4uOtc/ 8TvCgxE4VwKaqVjg+Fsvn2I8lpzDKkCfM2lC5xej/dTDeUSsQQEX4u1NULayJK3k 1vv9BGOg8T5JTEvtqhNzg7WRQZ4n1fSMc9K9V08M7OyA681hULhF4IoFXPJJ/2ZH EjSWu54H2xblXTkJXF6wYLbJhV9zScfy0/DlNqCfm0ZB0tol/QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMhCCdfhjliSsQzXsJtbsd2PXE9GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2Yw NjFjZS0xYTYxLTQ5M2ItOGYzYi00NzIzMzQ0NTNmMGQvZjM0ZTcwZWItZjUxMS0z NzhkLWE4ZjktMDM3YWViYmM1NzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjNmMDYxY2UtMWE2MS00OTNiLThm M2ItNDcyMzM0NDUzZjBkLzIzZjA2MWNlLTFhNjEtNDkzYi04ZjNiLTQ3MjMzNDQ1 M2YwZC5jcmwwHwYDVR0jBBgwFoAUsEwcv9sM76V+ua9TApCg50y83MkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2YwNjFjZS0xYTYxLTQ5M2ItOGYzYi00NzIz MzQ0NTNmMGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABD7Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAO1R05LN5S5Iqpgo5NSrJYu2qomPf0l4sxgt0kDhPyaLb5q+IUOcL CcF2iC6A+b+v2awbNH1ASqLlZV+UJZeE/79eDZPoWi1BL2iJH2DXnOqVudhQJheu H1cujmbEdMvBd+QOE8srMfPd3u9ssBRx1zzHSPxWI6JO2JSlaFX12vBR86D36oG9 wNJh/C1bAtiwdSmntwDO/vKzroM5vQ+p0m7FeQgjFJES0GGoP2pPz4gqvSRs6hjR n5AfbnSJoyMlIfQsG6vGU3ZZtC6rkeAybwDxHzTJmG7I9AuEFwSiX+E7XbRt55PC KmzaHJYl4YiTYtVU0mis+Q7Z+/Pe8wMPgw== -----END CERTIFICATE-----Generated at Sat Apr 26 12:53:55 2025 by rpki-client